REMARKS 

Applicants respectfully request that the above-identified application be reexamined. 

Claims 1-29 are pending in this application. The Office Action mailed April 14, 2008 
(hereinafter the "Office Action"), rejected Claims 1-18, 10-12, 14-26, 28, and 29 under 35 U.S.C. 
§ 103(a) as being unpatentable over U.S. Patent Application Publication No. 2002/0143961, to 
Siegel et al. (hereinafter "Siegel et ah"), in view of U.S. Patent No. 6,470,454, issued to 
Challener et al (hereinafter "Challener et al.")- Claims 9, 13, and 27 were rejected under 
35 U.S.C. § 103(a) as being unpatentable over Siegel et al. and Challener et al., in view of 
U.S. Patent No. 6,370,141, issued to Giordano III et al. (hereinafter "Giordano 111 et al."). 

Pursuant to 37 C.F.R. § 1.111 and for the reasons set forth below, applicants respectfully 
request reconsideration and allowance of the pending claims. Prior to discussing in detail why 
applicants believe that all the claims in this application are allowable, a brief description of the 
disclosed subject matter and brief descriptions of the teachings of the cited and applied 
references are provided. The following descriptions of the disclosed subject matter and the cited 
and applied references are not provided to define the scope or interpretation of any of the claims 
of this application. Instead, these descriptions are provided solely to assist the United States 
Patent and Trademark Office in recognizing the differences between the pending claims and the 
cited references and should not be construed as limiting on the disclosed subject matter. 
Disclosed Subject Matter 

A system and method that provide a user choice setting process that permits applications 
to safely modify user choice settings in a manner that is verifiable and transparent to the user are 
disclosed. The system and method operate to advantageously enforce and protect user choice 
settings and to deter applications from modifying those settings without explicit user approval. 
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User choice settings are stored as protected values. Applications request modifications to 
the user choice settings by calling the user choice setting process to obtain approval from the 
user. Upon receiving approval, the user choice setting process first modifies the corresponding 
access control indicator of the protected value to allow the user to write the value. Once the 
corresponding access control indicator of the protected value has been modified, the user choice 
setting process is able to modify the user choice setting as requested. Before returning control of 
the protected value to the system, the user choice setting process restores the corresponding 
access control indicator to again only allow the user to read but not write the newly modified 
protected value. Preferably, the user choice setting process generates an approval user interface 
to display to the user their user choice settings and to receive from the user an input to approve 
the application's request to change those settings. Should the user not approve the application's 
request, the user choice setting process terminates the request and does not modify the 
corresponding access control indicator of the protected value, nor does it modify the protected 
value. 

Summary of Sicgel et al. (U.S. Patent Application Publication No. 2002/0143961) 

Siegel et al. is purportedly directed toward a customer profile access protocol with 
flexible access control capabilities. The protocol facilitates secure and privacy enabled access to 
user profile data. The user profile data may be accessed by clients, such as other users, service 
providers, and system administrators. The user profile data is used by service providers and 
system administrators. The user profile data is used by service providers to customize services 
provided to users. Permissions that control profile access are established under user control. 
The user specifies different permissions for different grains of information within the user 
profile. Clients may be grouped such that permissions may be associated with a single group or 
combinations of groups specified by algebraic set operators. While Siegel et al. describes a 
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method of facilitating access to user profile data, Siegel et al. fails to teach, disclose, or suggest 
applications requesting modifications to user choice settings and modifying user choice setting in 
response to user authorization. 

Summary of Challener et ah (U.S. Patent No. 6,470,454) 

Challener et al. purportedly describes a method and apparatus that are provided for 
facilitating the generation and use of computer system configuration passwords that can be 
utilized in an enterprise or organization to allow authorized users having knowledge of the 
password associated with a particular data processing system to make and change configuration 
decisions, but which prevents unauthorized users from making and changing such configuration 
decisions. In the preferred embodiment, a unique identifier (such as a serial number) and an 
enterprise secret key are supplied to a one-way cryptographic hash function in order to generate 
the configuration passwords which are unique to each data processing system of the plurality of 
data processing system of the enterprise or organization. Like Siegel et al., Challener et al. fails 
to teach, disclose, or suggest applications requesting modifications to user choice settings and 
modifying user choice setting in response to user authorization. 
Summary of Giordano III et al (U.S. Patent No. 6,370,141) 

Giordano III et al. is purportedly directed toward a method of changing the settings of an 
Internet appliance using the Internet. An Internet appliance accesses an HTML page on a 
Web site containing configuration information for an Internet appliance, such as an Internet 
compatible telephone. Data from the HTML page are downloaded to the Internet appliance to 
modify its options or settings automatically upon accessing the HTML page or as directed by the 
user. The data is downloaded to a programmable memory in the Internet appliance and the 
stored data is used to upgrade the Internet appliance. The upgrade HTML page includes 
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information to alert the user when new information is available regarding changes to options and 
setti ngs of the Internet appliance. 

Like Siegel et al. and Challener et al., Giordano III et al. fails to teach, disclose, or 
suggest applications requesting modifications to user choice settings and modifying user choice 
setting in response to user authorization. 

Rejection of Claims 1-8, 10-12, 14-26, 28, and 29 Under 35 U.S.C, § 103(a) 

As indicated above, Claims 1-18, 10-12, 14-26, 28, and 29 have been rejected under 
35 U.S.C. § 1 03(a) as being unpatentable over Siegel et al. in view of Challener et al. 

Initially, applicants point out that the method described in Siegel et al. is different in 
principle than the one recited in Claim 1 . Siegel et al. describes a method wherein the clients or 
the groups of clients do not request special permission from a user to access the information in 
the user profile. Instead, they access the user information according to the permissions 
associated with groups or individual clients that specify the type of access, e.g., write, read, 
delete, or permission write access, (paragraphs [0032], [0033].) hi contrast, Claim 1 recites a 
method that requires a system to seek a user's permission to change a user choice setting that is a 
protected value each time an application requests to change the user choice setting. 
Claims 1-11 

The Office Action asserts that Siegel et al. discloses "receiving an input from a user 
authorizing an application to modify the user choice setting." (OA, page 3). Applicants 
respectfully disagree. Initially, applicants point out that the Office Action misquoted the above 
recitation of Claim 1 , which in full reads as follows: 

in response to receiving an input from a user authorizing the 
application to modify the user choice setting on the user's behalf: 

Paragraph [0026] of Siegel et al., referenced by the Office Action with regard to this 

recitation states only that a "verified and authenticated user" may "review and modify the user's 
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user profile and associated permissions." Thus, in Siegel et al., it is a user who seeks access to 
his/her profile and security settings in order to modify them. Nowhere in the referenced 
paragraph or elsewhere does Siegel et al. disclose, teach, or remotely suggest that an application 
may modify the settings on a user's behalf based upon the user's permission, i.e., "in response to 
receiving an input from a user authorizing the application to modify the user choice setting on 
the user's behalf." 

The Office Action admits, and applicants agree, that Siegel et al. "fails to teach ... in 
response to receiving a request from the application to modify the user choice setting, requesting 
authorization from the user to modify the user choice setting." (OA, page 3.) The Office Action 
further states that: 

in an analogous art Challcncr teaches . . . in response to receiving a 
request from the application to modify the user choice setting, requesting 
authorization from the user to modify the user choice setting (Challener, 
Col. 5, Lines 45-50, password used to protect changes to a system). 

Applicants respectfully disagree. While Col. 5, lines 45-50, of Challener et al., 
referenced by the Office Action in regard to the above recitation of Claim 1, describe a user 
accessing computer settings by entering a correct password, the referenced text clearly fails to 
teach or suggest a system requesting authorization from the user for the system to modify 
settings in response to an application request to modify the settings. The referenced text 
simply describes an entirely different process. 

Because neither Siegel et al. nor Challener et al. teach, disclose, or remotely suggest the 
above recitations of Claim 1 , Claim 1 is submitted to be allowable over Siegel et al., taken alone 
or in combination with Challener et al. Because Claims 2-8 and 10-11 depend directly or 
indirectly from Claim 1, they are submitted to be allowable for at least the same reasons as 
Claim 1 . 
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Claims 12 and 14-18 

Claim 12, as amended, reads as follows: 

A system for communicating user choice settings between an 
application and a registry for storing the user choice settings, the system 
comprising: 

(a) a registry for storing a user choice setting as a protected 
value in a registry key, the user choice setting determining an application's 
operation in a user's computing device, the application's operation 
including handling a particular event in the user's computing device; 

(b) an access control list (ACL) for securing the registry 

key; and 

(c) an interface to control modifications to the user choice 

setting: 

(i) in response to the interface receiving a request 
from the application to modify the user choice setting on the user's 
behalf, requesting an authorization from a user to modify the user 
choice setting; and 

(ii) in response to receiving the authorization 

from the user, 

(1) modifying the ACL to permit writing to 
the protected value in the registry key; 

(2) writing to the protected value the 
modified user choice setting; and 

(3) restoring the ACL to prevent writing to 
the protected value in the registry key i after writing the modified user 
choice setting. 

(Emphasis added.) 

Recitations (c)(i) and (c)(ii) of Claim 12, as amended, recite subject matter very similar to 
that of Claim l's recitations (b) and (c) discussed above. Therefore, for the reasons discussed 
above in regard to Claim l's recitations (b) and (c), neither Siegel et al. nor Challener et al. teach, 
disclose, or remotely suggest recitations (c)(i) and (c)(ii) of Claim 12. As a result, Claim 12 is 
submitted to be allowable over Siegel et al. in view of Challener et al. 

Because Claims 13-18 depend directly or indirectly from Claim 12, Claims 13-18 are 
submitted to be allowable for at least the same reasons as Claim 12. 
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Claims 19-26, 28, and 29 

Because independent Claim 19 has been rejected for the same reasons and based on the 
same referenced text as Claim 1, Claim 19 is submitted to be allowable for at least the same 
reasons as Claim 1 is submitted to be allowable since Claim 19 includes recitations similar to the 
Claim 1 recitations discussed above. Because Claims 20-26, 28, and 29 depend directly or 
indirectly from Claim 19, they are submitted to be allowable for at least the same reasons as 
Claim 19. 

Rejection of Claims 9, 13, and 27 Under 35 U.S.C. § 103(a) 

As indicated above, Claims 9, 13, and 27 have been rejected under 35 U.S.C. § 103(a) as 
being unpatentable over Siegel et al. and Challener et al, in view of Giordano III et al. Because 
Claim 9 depends from Claim 1, Claim 13 depends from Claim 12, and Claim 27 depends from 
Claim 19, and because Claims 1, 12, and 19 are submitted to be allowable, Claims 9, 13, and 27 
are also submitted to be allowable over Siegel et al. and Challener et al. in view of Giordano 111 
etal., since Giordano III et al. does not make up for the deficiencies of Siegel et al. and 
Challener et al., as discussed above in regard to Claims 1, 12, and 19. 
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CONCLUSION 

In view of the amendments and remarks above, applicants respectfully submit that the 
pending claims are in condition for allowance. Reconsideration and reexamination of the 
application and allowance of the claims at an early date are solicited. If the Examiner has any 
questions or comments concerning the foregoing response, the Examiner is invited to contact the 
applicants' undersigned attorney at the number below. 



Respectfully submitted, 
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